Описание
Security update for libssh
This update for libssh fixes the following issues:
- CVE-2016-0739: Fix Weakness in diffie-hellman secret key generation. (bsc#965875)
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.1
libssh-0.6.3-10.1
libssh-devel-0.6.3-10.1
libssh-devel-doc-0.6.3-10.1
libssh4-0.6.3-10.1
libssh4-32bit-0.6.3-10.1
Ссылки
- E-Mail link for openSUSE-SU-2016:0722-1
- SUSE Security Ratings
Описание
libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
Затронутые продукты
openSUSE Leap 42.1:libssh-0.6.3-10.1
openSUSE Leap 42.1:libssh-devel-0.6.3-10.1
openSUSE Leap 42.1:libssh-devel-doc-0.6.3-10.1
openSUSE Leap 42.1:libssh4-0.6.3-10.1
Ссылки
- CVE-2016-0739
- SUSE Bug 965875
- SUSE Bug 967026